Hello community
I have recently installed RADIUS app on my home Univention appliance (I have followed the docs: Univention Corporate Server ).
Every time my auth request is rejected.
My account details:
univention-radius-check-access --username=KoDa
DEBUG: [user=KoDa; mac=None] Given username: "KoDa" DEBUG: [user=KoDa; mac=None] Given stationId: "None" DEBUG: [user=KoDa; mac=None] UCS@school RADIUS support is not installed DEBUG: [user=KoDa; mac=None] Checking LDAP settings for user DEBUG: [user=KoDa; mac=None] DENY 'uid=KoDa,cn=users,dc=home,dc=lab' DEBUG: [user=KoDa; mac=None] -> DENY 'cn=Domain Users,cn=groups,dc=home,dc=lab' DEBUG: [user=KoDa; mac=None] -> -> DENY 'cn=Users,cn=Builtin,dc=home,dc=lab' DEBUG: [user=KoDa; mac=None] -> ALLOW 'cn=RADIUS,cn=groups,dc=home,dc=lab' INFO: [user=KoDa; mac=None] Login attempt permitted by LDAP settings DEBUG: [user=KoDa; mac=None] MAC filtering is disabled by radius/mac/whitelisting. INFO: [user=KoDa; mac=None] User is allowed to use RADIUS DEBUG: [user=KoDa; mac=None] --- Thus access is ALLOWED
I have tested auth on my WiFi Access Point and on built in RADIUSD client on pfSense router with MSCHAPv2 enabled (also I tried diffrent settings).
Every time I’m getting as response: KoDa/<no User-Password attribute
Tue Mar 16 15:44:11 2021 : Auth: (0) Rejected in post-auth: [KoDa/] (from client ap port 0 cli <MAC_address>)
With diffrent settings on RADIUS client side it looks similiar:
Tue Mar 16 15:59:55 2021 : Auth: (0) Invalid user: [koda/] (from client router port 0)
Tue Mar 16 15:59:55 2021 : Auth: (0) Rejected in post-auth: [koda/] (from client router port 0)
Tue Mar 16 16:00:26 2021 : Auth: (1) Invalid user: [koda/] (from client router port 0)
Tue Mar 16 16:00:26 2021 : Auth: (1) Rejected in post-auth: [koda/] (from client router port 0)
Tue Mar 16 16:00:56 2021 : Auth: (2) Invalid user: [koda/ClearTextPassword] (from client router port 0)
Tue Mar 16 16:00:56 2021 : Auth: (2) Rejected in post-auth: [koda/ClearTextPassword] (from client router port 0)
Tue Mar 16 16:02:04 2021 : Auth: (3) Invalid user: [koda/] (from client router port 0)
Tue Mar 16 16:02:04 2021 : Auth: (3) Rejected in post-auth: [koda/] (from client router port 0)
Tue Mar 16 16:02:36 2021 : Auth: (4) Invalid user: [koda/] (from client router port 0)
Tue Mar 16 16:02:36 2021 : Auth: (4) Rejected in post-auth: [koda/] (from client router port 0)
Tue Mar 16 16:03:02 2021 : Auth: (5) Invalid user: [koda/] (from client router port 0)
Tue Mar 16 16:03:02 2021 : Auth: (5) Rejected in post-auth: [koda/] (from client router port 0)
I’m wondering - Do I forgot about something ?
It looks like some kind of FreeRADIUS3 bug because i tried FreeRADIUS3 server package on my pfSense router (with LDAP integration) and I’m having same response (like above).
Thanks in advance for any help
My appliance is:
FreeRADIUS Version 3.0.12
Copyright (C) 1999-2016 The FreeRADIUS server project and contributors
There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A
PARTICULAR PURPOSE
You may redistribute copies of FreeRADIUS under the terms of the
GNU General Public License
For more information about these matters, see the file named COPYRIGHT